312897 matches found
CVE-2026-96909
A heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to achieve remote code execution over a network. This vulnerability is classified with a CRITICAL CVSS score of 9.80 . While specific technical details regarding the underlying component or file are not provided bey...
CVE-2026-96918
An improper access control vulnerability exists in Windows NTFS , which allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-863 (Incorrect Authorization) and carries a HIGH base severity score of 7.8. Remediation involves an official fix ...
CVE-2026-96913
A heap-based buffer overflow exists in the Windows Kernel , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is assigned a CVSS 3.1 score of 8.8 (High) , indicating significant impact on confidentiality, integrity, and availability. No specific so...
CVE-2026-96912
A Use after free vulnerability in the Windows Client License Service allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 and has a CVSS 3.1 base score of 7.8 . While the documents confirm the impact of privilege elevation, no specific...
CVE-2026-96916
A heap-based buffer overflow exists in the Windows NTFS file system. This vulnerability allows an authorized attacker to perform a local privilege escalation . The severity is rated as HIGH with a CVSS 3.1 score of 7.8. No specific exploitations are mentioned in the provided documents. Remediatio...
CVE-2026-96910
An untrusted pointer dereference vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to perform a local information disclosure attack. The vulnerability is associated with CWE-822 . No specific software versions, root cause details, or exploit ...
EUVD-2026-100233
Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally...
CVE-2026-96852
A Use after free vulnerability exists in Windows TCP/IP that allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-416 . While the CVSS 3.1 score indicates a High severity (7.0), specific technical details regarding the vulnerable component ...
EUVD-2026-100229
Use of uninitialized resource in Windows Modern Device Management MDM allows an authorized attacker to disclose information locally...
EUVD-2026-100232
Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally...
CVE-2026-96847
A vulnerability in WebDAV involves an untrusted pointer dereference that allows an authorized attacker to perform a local privilege elevation . The issue is associated with CWE-822 and has a CVSS 3.1 base score of 7.8 (High) . No specific affected versions, root causes, or exploit links are provi...
CVE-2026-96850
A vulnerability in Windows Modern Device Management (MDM) involving the use of uninitialized resource (CWE-908) and improper null termination (CWE-170) allows an authorized attacker to disclose information locally . The vulnerability has a CVSS 3.1 base score of 5.5 with a local attack vector and...
CVE-2026-96325
The Windows SMB Server is affected by a vulnerability caused by a missing reference to an active allocated resource (CWE-771). This flaw allows an unauthorized attacker to perform a denial of service (DoS) attack over the network. The vulnerability has a CVSS 3.1 base score of 7.5 and is categori...
EUVD-2026-100227
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
EUVD-2026-100231
Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally...
EUVD-2026-100228
Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network...
EUVD-2026-100236
Time-of-check time-of-use toctou race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...
CVE-2026-96853
A Time-of-check time-of-use (TOCTOU) race condition exists in the Windows Win32 Kernel Subsystem . This vulnerability allows an authorized attacker to perform a local information disclosure . While the technical details of the root cause are limited to the TOCTOU classification (CWE-367), the imp...